Lucene search
+L

218 matches found

CNNVD
CNNVD
added 2025/05/16 12:00 a.m.11 views

WordPress plugin Pinterest Automatic Pin 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

4.3CVSS6AI score0.00283EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/03/01 8:35 p.m.8 views

Malicious code in pinterest-api-quickstart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de6afa61b510fce124f3acc43d8e5400a0bf0566b85284bf19cf7fdea19934c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2025/03/01 8:35 p.m.5 views

MAL-2025-1660 Malicious code in pinterest-api-quickstart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de6afa61b510fce124f3acc43d8e5400a0bf0566b85284bf19cf7fdea19934c0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/02/06 4:20 a.m.14 views

CVE-2021-4380

The Pinterest Automatic plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the 'wppinterestautomaticparserequest' function and the 'processform.php' script in versions up to, and including, 1.14.3. This makes it possible for unauthenticated attackers to...

9.8CVSS6.8AI score0.04528EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/02/05 9:19 a.m.10 views

CVE-2024-56028

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lemonadestudio Lemonade Social Networks Autoposter Pinterest lemonade-sna-pinterest-edition allows Reflected XSS.This issue affects Lemonade Social Networks Autoposter Pinterest: from n/a through =...

7.1CVSS7.2AI score0.00259EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/02 10:15 a.m.14 views

CVE-2024-56028

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lemonadestudio Lemonade Social Networks Autoposter Pinterest lemonade-sna-pinterest-edition allows Reflected XSS.This issue affects Lemonade Social Networks Autoposter Pinterest: from n/a through =...

7.1CVSS0.00259EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/02 12:00 a.m.7 views

WordPress plugin Lemonade Social Networks Autoposter Pinterest 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Lemonade Social Networks...

7.1CVSS7.6AI score0.00259EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/01/02 12:00 a.m.6 views

PT-2025-3176 · Unknown · Lemonade Social Networks Autoposter Pinterest

Name of the Vulnerable Software and Affected Versions: Lemonade Social Networks Autoposter Pinterest versions n/a through 2.0 Description: The issue is related to improper neutralization of input during web page generation, which allows reflected Cross-site Scripting XSS. This problem enables...

7.1CVSS9AI score0.00259EPSS
SaveExploits0References8
Patchstack
Patchstack
added 2024/12/17 7:39 p.m.7 views

WordPress Lemonade Social Networks Autoposter Pinterest plugin <= 2.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Lemonade Social Networks Autoposter Pinterest versions = 2.0...

7.1CVSS6.1AI score0.00259EPSS
SaveExploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2024/12/13 3:15 p.m.14 views

CVE-2023-32593

Missing Authorization vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Pins for Pinterest: from n/a through = 1.6.7...

5.4CVSS5.8AI score0.00433EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/12/13 2:23 p.m.35 views

CVE-2023-32593 WordPress GS Pins for Pinterest plugin <= 1.6.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in GS Plugins GS Pins for Pinterest allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Pins for Pinterest: from n/a through 1.6.7...

5.4CVSS0.00433EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/13 2:23 p.m.18 views

CVE-2023-32593 WordPress GS Pins for Pinterest plugin <= 1.6.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Pins for Pinterest: from n/a through = 1.6.7...

5.4CVSS7AI score0.00433EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/13 2:23 p.m.41 views

CVE-2023-32593

The CVE-2023-32593 entry affects the WordPress GS Pins for Pinterest plugin up to version 1.6.7, where a Missing Authorization / Broken Access Control vulnerability exists due to incorrectly configured access control. Patchstack confirms that versions

5.4CVSS5.1AI score0.00433EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/13 12:00 a.m.9 views

WordPress plugin GS Pins for Pinterest 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.4CVSS6.5AI score0.00433EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/13 12:00 a.m.19 views

PT-2024-12336 · Unknown · Gs Pins For Pinterest

Name of the Vulnerable Software and Affected Versions: GS Pins for Pinterest versions 1.6.7 and earlier Description: The issue involves a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. This is a result of broken access...

5.4CVSS7.2AI score0.00433EPSS
SaveExploits0References6
OSV
OSV
added 2024/12/03 8:15 a.m.7 views

CVE-2024-11453

The WordPress Pinterest Plugin – Make a Popup, User Profile, Masonry and Gallery Layout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gspinwidget' shortcode in all versions up to, and including, 1.8.8 due to insufficient input sanitization and output escaping...

5.4CVSS7.4AI score0.00283EPSS
SaveExploits0References3
NVD
NVD
added 2024/12/03 8:15 a.m.23 views

CVE-2024-11453

The WordPress Pinterest Plugin – Make a Popup, User Profile, Masonry and Gallery Layout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gspinwidget' shortcode in all versions up to, and including, 1.8.8 due to insufficient input sanitization and output escaping...

6.4CVSS0.00283EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/12/03 7:34 a.m.11 views

CVE-2024-11453 WordPress Pinterest Plugin – Make a Popup, User Profile, Masonry and Gallery Layout <= 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

The WordPress Pinterest Plugin – Make a Popup, User Profile, Masonry and Gallery Layout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gspinwidget' shortcode in all versions up to, and including, 1.8.8 due to insufficient input sanitization and output escaping...

6.4CVSS5.9AI score0.00283EPSS
SaveExploits0References3
CVE
CVE
added 2024/12/03 7:34 a.m.64 views

CVE-2024-11453

CVE-2024-11453 concerns the WordPress Pinterest Plugin – Make a Popup, User Profile, Masonry and Gallery Layout. The vulnerability is a Stored Cross-Site Scripting flaw in the plugin’s gs_pin_widget shortcode, arising from insufficient input sanitization and output escaping for user-supplied attr...

6.4CVSS5.7AI score0.00283EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/12/03 12:00 a.m.10 views

PT-2024-17004 · WordPress · Wordpress Pinterest Plugin

Name of the Vulnerable Software and Affected Versions: WordPress Pinterest Plugin versions up to, and including, 1.8.8 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'gs pin widget' shortcode due to insufficient input sanitization and output escaping on...

6.4CVSS8AI score0.00283EPSS
SaveExploits0References8
Rows per page
Query Builder